Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/Le2IcsglsUK7MmoTiR0HCGBcsfg.roa
File: Le2IcsglsUK7MmoTiR0HCGBcsfg.roa (raw, json)
Hash identifier: Vz7fQQzcYOs39ikyMNpM2ZjtwCxcyKTuvMZ++yboBac=
Subject key identifier: 2D:ED:88:72:C8:25:B1:42:BB:32:6A:13:89:1D:07:08:60:5C:B1:F8
Certificate issuer: /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial: 019B7EA703430D37D49368753EEB43B6D0C9
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/Le2IcsglsUK7MmoTiR0HCGBcsfg.roa
Signing time: Fri 02 Jan 2026 12:20:33 +0000
ROA not before: Fri 02 Jan 2026 12:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44884
IP address blocks: 176.103.208.0/22 maxlen: 22
195.216.210.0/23 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:03:43:0d:37:d4:93:68:75:3e:eb:43:b6:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Validity
Not Before: Jan 2 12:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ded8872c825b142bb326a13891d0708605cb1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:99:1c:66:83:d1:b4:a3:74:ae:d7:6e:f6:77:
5f:53:25:8a:9f:24:92:ac:e2:f8:13:0b:c0:8f:b7:
e7:64:58:55:8d:3d:be:c5:b0:64:3b:b1:9e:e0:44:
c9:b0:38:21:fd:8b:99:dc:5f:40:2e:11:ce:88:1f:
13:f9:10:c8:c7:2f:14:e4:d5:23:af:0b:12:5d:a2:
ce:1d:95:2a:fd:2d:37:c4:99:ce:4b:e8:61:28:53:
a0:de:57:20:c4:5d:99:9f:7e:a8:54:3d:9d:67:11:
16:cf:40:24:0f:3f:d1:77:0d:99:25:04:d1:3f:70:
f0:66:36:65:71:5f:0e:12:47:4a:33:96:09:dd:a1:
46:d4:a6:07:c0:f6:c3:5f:21:92:f3:48:ef:72:27:
f4:c3:e1:5d:7c:ef:34:62:22:89:de:8f:4e:8d:2e:
fd:e0:cb:e3:e1:3e:03:11:9f:40:2e:1a:ae:e7:f7:
14:b1:03:9f:6a:fb:03:38:9a:d3:2b:df:85:c2:ef:
fa:c0:38:08:d8:5c:ec:a9:e1:c8:5a:bd:5a:1d:f2:
3f:fe:5d:e9:30:2a:cb:4c:e8:d8:e3:d5:cf:73:6c:
37:fd:4f:44:49:bf:6c:6c:57:45:eb:0b:09:0d:1c:
e8:1c:ff:c3:ea:df:84:8d:a6:4e:76:2f:0e:e1:86:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:ED:88:72:C8:25:B1:42:BB:32:6A:13:89:1D:07:08:60:5C:B1:F8
X509v3 Authority Key Identifier:
keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/Le2IcsglsUK7MmoTiR0HCGBcsfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.208.0/22
195.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
39:60:25:99:74:b9:47:70:f8:51:45:d2:62:11:78:6b:81:d0:
88:2c:0e:fb:f0:2a:7b:90:2a:d6:a7:65:a8:51:8d:9f:ee:e1:
cf:58:8b:82:66:21:c3:c8:22:2e:04:74:ae:de:ab:cc:b7:74:
91:85:eb:b4:ab:3e:6d:e1:c3:c8:43:cc:0c:f1:43:ad:0c:65:
b9:34:4c:07:56:76:a5:c1:3b:71:56:45:a2:d6:2d:cb:e3:65:
ed:85:1f:55:f0:be:8a:3a:d7:08:60:7e:13:60:98:1c:b2:bf:
ab:57:f7:f4:91:58:a5:5d:7d:47:78:d2:bc:27:62:09:93:b0:
dc:3a:67:cf:73:60:b0:9a:c9:de:e9:61:dd:e5:ef:d5:a7:fa:
65:ef:b7:d1:f8:7d:99:a3:b8:a3:e7:3f:68:bd:a1:ab:7b:a5:
0c:b4:d1:f8:a2:aa:15:86:32:68:4e:78:c7:44:f0:7e:2f:69:
07:e6:ff:2e:03:50:52:dd:2a:59:6a:09:e8:6b:71:b1:bd:2a:
49:f2:54:17:7c:81:68:66:56:e1:bf:e3:ac:2e:46:3f:cd:61:
cb:bb:84:3d:60:25:c9:e1:ba:a7:8d:d6:b2:de:2f:6a:a7:66:
f8:68:c6:a7:e9:37:fd:3d:6c:b3:2e:01:cd:e5:f2:25:68:80:
06:56:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:01:38 2026 by rpki-client